clamavmodule or clamd ?

[Denis Beauchemin]

Rick Cooper a écrit :
>  
>
>   
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info 
>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf 
>> Of Denis Beauchemin
>> Sent: Tuesday, March 31, 2009 9:29 AM
>> To: MailScanner discussion
>> Subject: Re: clamavmodule or clamd ?
>>
>> Eddie Hallahan a écrit :
>>     
>>> Hi all,
>>>
>>> We currently run a chunk of servers and am having real 
>>>       
>> grief with the
>>     
>>> perl clamav module.  Our servers currently use clamavmodule in their
>>> scanning.  What would be the issues if we switched to clamd 
>>>       
>> - i.e. would
>>     
>>> this slow things down/speed them up, not make a difference?
>>>
>>> Regards
>>>
>>>   
>>>       
>> Eddie,
>>
>> We switched to clamd a while ago and noticed that MS uses 
>> much less RAM: 
>> each child had its own copy of Clam loaded into RAM with 
>> clamavmodule; 
>> now with clamd, only one instance is running.  It definitely 
>> is not slower!
>>
>> Be aware, though, that with the external phishing signatures, 
>> clamd has 
>> a tendency to crash some times each day so make sure to 
>> monitor it and 
>> restart it as soon as it dies.  I've heard people are using monit to 
>> this task (http://mmonit.com/monit/).
>>
>> Denis
>>
>>     
>
> I have not experienced crashing do to 3d party signatures, ever.
> If you are using a proper D/L script it should be checking the
> Files before moving them into use. I did have a problem with
> The official signatures a while back however.
>   

Rick,

I do use one of the download scripts. Clamd does crash randomly, 
sometimes while there were no new updates to load... many people are 
having this problem on the SaneSecurity list. Some say that 0.95 solves 
that problem but I am still at 0.94.2.

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x62252 F: 819.821.8045


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3306 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090331/e27dfe8f/smime.bin